Medium severity6.5NVD Advisory· Published Jun 3, 2019· Updated Jun 17, 2026
CVE-2018-5404
CVE-2018-5404
Description
The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potentially exploit multiple Blind SQL Injection vulnerabilities to retrieve sensitive information from the database or copy the entire database. An authenticated remote attacker could leverage Blind SQL injections to obtain sensitive data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<9.0.270+ 1 more
- (no CPE)range: <9.0.270
- (no CPE)range: 9.0.270
Patches
Vulnerability mechanics
References
2- support.quest.com/kb/288310/cert-coordination-center-report-updatenvdVendor Advisory
- www.kb.cert.org/vuls/id/877837/nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.